
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
File: 01Cgds5KjOb7afH9pKGUYUqUGvo.mft (raw, json)
Hash identifier: n6d67qu1NxniUxPdeTQS1wfYlfDmCH6Co1TAC1HZj58=
Subject key identifier: 3E:FF:35:C3:AB:3A:1E:49:A6:72:3D:D7:21:9C:35:2D:BE:3B:CA:6E
Authority key identifier: D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
Certificate issuer: /CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Certificate serial: 019748FAC80D2CEA4130246A4EFA8921D643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 06:01:24 +0000
Manifest this update: Sat 07 Jun 2025 06:01:24 +0000
Manifest next update: Sun 08 Jun 2025 06:01:24 +0000
Files and hashes: 1: 01Cgds5KjOb7afH9pKGUYUqUGvo.crl (hash: QZNmXIkQH7mdaXlLW3p7LuB62M5BmTCoVZbta7m773A=)
2: OHSnHISpUOg0a2IaET-7LST2nHw.roa (hash: oeWDTr24DHxY0Ln8Ar9TYuW/yYnaSQVcRJXJMi+oDck=)
3: qpaxXHw6CdsxQ2wzd3NCOLPGlGs.roa (hash: hJxFH9vZ+FKOP/6zKZOcfuqIjzXEfzETnfkGtTZDPOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:c8:0d:2c:ea:41:30:24:6a:4e:fa:89:21:d6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Validity
Not Before: Jun 7 06:01:24 2025 GMT
Not After : Jun 8 06:01:24 2025 GMT
Subject: CN=3eff35c3ab3a1e49a6723dd7219c352dbe3bca6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ec:e1:f9:a1:2d:21:4c:36:a1:a7:b3:1b:2d:
44:a1:39:38:43:fd:59:57:f5:75:9d:2b:ab:62:48:
a2:a7:77:a1:03:98:78:e4:b5:91:7f:e3:79:67:0a:
8d:ed:d9:bd:54:b5:17:fb:22:15:ca:3a:2f:ae:ea:
16:f2:54:4e:82:16:ef:9c:12:37:35:3f:36:3d:f3:
02:f2:26:31:3e:ae:30:d1:f7:8a:cb:10:72:da:fd:
a9:bd:f1:6c:5e:4b:a9:02:87:fc:59:70:95:6b:ef:
5d:86:e4:38:81:5e:fe:57:ab:36:4c:87:b1:66:41:
b7:62:7e:ba:93:78:57:4a:fa:90:dd:1f:36:2e:c7:
24:d1:50:ad:e9:a3:0a:ae:c0:0e:65:aa:bb:d8:fd:
be:89:f9:cd:67:15:60:39:ec:10:41:92:9b:4c:67:
a4:b1:e5:e2:db:b0:4e:51:b3:0b:b3:a5:0d:28:ee:
19:97:bc:84:01:f8:cf:e7:3a:9b:d7:95:4e:6a:d2:
dd:ba:62:b0:97:6a:d2:12:1f:1c:a0:51:88:02:b3:
e1:7c:96:52:d2:82:4c:30:d0:9d:00:02:68:90:d9:
3d:e5:09:24:d0:a8:1d:e2:1f:a8:92:2d:bc:a9:61:
08:5a:10:de:2a:61:74:fc:98:4d:a4:05:d1:97:2c:
d2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FF:35:C3:AB:3A:1E:49:A6:72:3D:D7:21:9C:35:2D:BE:3B:CA:6E
X509v3 Authority Key Identifier:
keyid:D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ea:73:d5:30:f3:2e:64:33:00:bf:a6:4b:ec:39:e8:0c:8e:
5e:84:92:7e:20:31:5d:26:c9:22:7b:d2:0a:be:5d:5c:43:64:
83:c4:8b:64:6e:00:1d:55:b7:eb:9a:26:f6:76:27:37:f0:9f:
de:8b:5f:51:a2:2f:4a:25:5f:d1:d9:49:00:1d:07:4a:78:ef:
39:c7:b4:cd:23:96:e0:7e:9a:f2:cc:17:2b:70:1f:3c:f1:e1:
e3:88:29:ed:8e:7b:77:84:15:70:ea:77:3a:3e:17:81:1a:b9:
d2:ac:31:3a:a9:ea:3a:12:1f:9a:42:bf:9c:bb:b0:16:7d:1e:
76:24:85:5c:bd:30:0b:76:48:d4:1f:da:1c:b1:2b:45:17:70:
8d:6f:ca:ad:1e:34:a5:2e:e6:b7:06:ac:55:67:ba:a7:b8:cc:
a7:2b:8a:a2:fe:53:08:c5:2a:70:de:a5:f6:ed:af:e3:25:d1:
f0:1d:dc:86:e0:9a:15:df:59:8e:91:1e:b5:da:d0:13:1f:f5:
ae:77:8a:b0:89:44:c8:93:cc:9f:37:42:f7:76:6c:95:2a:d3:
fb:c3:0c:ab:68:f0:bd:93:99:d5:4d:03:0d:9b:37:43:c4:20:
df:66:f9:17:19:7e:61:ef:7a:7f:fc:c6:41:82:f7:6d:af:14:
b9:25:07:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+sgNLOpBMCRqTvqJIdZDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTBhMDc2Y2U0YThjZTZmYjY5ZjFmZGE0YTE5NDYxNGE5
NDFhZmEwHhcNMjUwNjA3MDYwMTI0WhcNMjUwNjA4MDYwMTI0WjAzMTEwLwYDVQQD
EygzZWZmMzVjM2FiM2ExZTQ5YTY3MjNkZDcyMTljMzUyZGJlM2JjYTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtezh+aEtIUw2oaezGy1EoTk4Q/1Z
V/V1nSurYkiip3ehA5h45LWRf+N5ZwqN7dm9VLUX+yIVyjovruoW8lROghbvnBI3
NT82PfMC8iYxPq4w0feKyxBy2v2pvfFsXkupAof8WXCVa+9dhuQ4gV7+V6s2TIex
ZkG3Yn66k3hXSvqQ3R82Lsck0VCt6aMKrsAOZaq72P2+ifnNZxVgOewQQZKbTGek
seXi27BOUbMLs6UNKO4Zl7yEAfjP5zqb15VOatLdumKwl2rSEh8coFGIArPhfJZS
0oJMMNCdAAJokNk95Qkk0Kgd4h+oki28qWEIWhDeKmF0/JhNpAXRlyzS3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7/NcOrOh5JpnI91yGcNS2+O8puMB8GA1UdIwQY
MBaAFNNQoHbOSozm+2nx/aShlGFKlBr6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFDZ2RzNUtqT2I3YWZIOXBLR1VZVXFVR3ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zY2FjNmItMmMyYS00YjY2LWFkZWUt
ZDUyMzI1ZGU2YjA4LzEvMDFDZ2RzNUtqT2I3YWZIOXBLR1VZVXFVR3ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8zY2FjNmItMmMyYS00YjY2LWFkZWUtZDUyMzI1ZGU2YjA4
LzEvMDFDZ2RzNUtqT2I3YWZIOXBLR1VZVXFVR3ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOpz1TDz
LmQzAL+mS+w56AyOXoSSfiAxXSbJInvSCr5dXENkg8SLZG4AHVW365om9nYnN/Cf
3otfUaIvSiVf0dlJAB0HSnjvOce0zSOW4H6a8swXK3AfPPHh44gp7Y57d4QVcOp3
Oj4XgRq50qwxOqnqOhIfmkK/nLuwFn0ediSFXL0wC3ZI1B/aHLErRRdwjW/KrR40
pS7mtwasVWe6p7jMpyuKov5TCMUqcN6l9u2v4yXR8B3chuCaFd9ZjpEetdrQEx/1
rneKsIlEyJPMnzdC93ZslSrT+8MMq2jwvZOZ1U0DDZs3Q8Qg32b5Fxl+Ye96f/zG
QYL3ba8UuSUHKQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:32:55 2025 by rpki-client